StackRadar

GHSA-6g2r-675j-hx59

Low

Advisory

Published 2 Oct 2026In the index since 3 Oct 2026
Severity
Low
worst across findings
CVSS
2.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 18,176 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release

Carried by container images the latest versions of 1 of 18,176 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
xxhash-rustcargo0.8.150.8.161
OSV records
GHSA-6g2r-675j-hx59

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
datahubdatahubVerified publisher1.1.71 of 4See more

datahub datahub 1.1.7

1 of the 4 container images this version deploys carry GHSA-6g2r-675j-hx59.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
xxhash-rust@0.8.15
0.8.16

Open the chart page →

1,609

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
acryldata/datahub-actions:v1.7.0.1c5fd70130157
xxhash-rust@0.8.15
0.8.16
1

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.